CVEFinder.io

CVE-2026-105757

đŸ”ļ medium
🔍 Scan for this CVE
Summary

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary

Description

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.

CVSS Score
6.5
Medium
EPSS Score
0.3
Exploit Probability
Published Date
2026-10-05
First Seen: 2026-10-08
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 46.5% of all 365,616 vulnerabilities in our database.

#195,441
Below average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Oct 6, 2026
🔍 Exploitation Status
None
No known exploits
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-10-08
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE IDs (Weakness Types)
CWE-20 CWE-248 CWE-755

đŸ“Ļ Affected Products 1

Vendor Product Status Affected Versions
vllm vllm Affected
< 0.30.0

🔗 References 4

https://github.com/vllm-project/vllm/commit/c55e15a4...
Patch
https://github.com/vllm-project/vllm/pull/51450
Issue Tracking Patch
https://github.com/vllm-project/vllm/releases/tag/v0...
Release Notes
https://github.com/vllm-project/vllm/security/adviso...
Mitigation Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-105752 ℹī¸ low 3.1 0.2 vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted... 2026-10-05
CVE-2026-105753 đŸ”ļ medium 6.5 0.4 vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU ... 2026-10-05
CVE-2026-105754 đŸ”ļ medium 6.5 0.3 vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint ... 2026-10-05
CVE-2026-105755 đŸ”ļ medium 4.2 0.2 vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at th... 2026-10-05
CVE-2026-105756 đŸ”ļ medium 6.5 0.3 vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models acc... 2026-10-05
CVE-2026-105758 đŸ”ļ medium 5.3 0.3 vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and... 2026-10-05
These CVEs affect the same products